IBM Support

PI74896: DFHXS1201 THE PASSWORD SUPPLIED IN THE VERIFICATION REQUEST FOR USERID XX WAS INVALID IS IMPROPERLY ISSUED.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • After migration from CICS TS 42, without the support of the
    Enhanced Password Algorithm (RACF APAR OA43999) to CICS TS V52,
    the passticket decoding is not working properly and result in
    the message:
    DFHXS1201 THE PASSWORD SUPPLIED IN THE VERIFICATION REQUEST FOR
    USERID aaaaaa WAS INVALID. THIS OCCURRED IN TRANSACTION tttt
    WHEN USERID user WAS SIGNED ON AT NETNAME nnnn
    .
    Customer is using GROUPID as part of the passticket decoding and
    the VERIFYX call introduced by the support of the Enhanced
    Password Algorithm is not containing the GROUPID.
    

Local fix

  • n/a
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All CICS Users.                              *
    ****************************************************************
    * PROBLEM DESCRIPTION: EXEC CICS SIGNON may fail when using    *
    *                      passtickets.                            *
    ****************************************************************
    * RECOMMENDATION: .                                            *
    ****************************************************************
    When an application creates a passticket using userid, applid
    and groupid an EXEC CICS SIGNON USERID(u) PASSWORD(passticket)
    GROUPID(g) is issued. CICS verifies the password without passing
    the GROUPID parameter to the ESM and so the validate of the
    passticket fails.
    

Problem conclusion

  • DFHXSSB, DFHXSPW and DFHUSAD have been changed to allow
    passtickets to be verified using groupid.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI74896

  • Reported component name

    CICS TS Z/OS V5

  • Reported component ID

    5655Y0400

  • Reported release

    000

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    YesHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2017-01-13

  • Closed date

    2017-01-26

  • Last modified date

    2017-03-02

  • APAR is sysrouted FROM one or more of the following:

    PI70500

  • APAR is sysrouted TO one or more of the following:

    UI44253 UI44254

Modules/Macros

  • DFHESN   DFHISXS  DFHPITC  DFHSOIS  DFHSOLS  DFHSOSE  DFHSZREQ
    DFHUSAD  DFHWBSR  DFHWBXM  DFHWBXN  DFHXSAD  DFHXSDM  DFHXSFL
    DFHXSIS  DFHXSLU  DFHXSPW  DFHXSPWT DFHXSRC  DFHXSSA  DFHXSSB
    DFHXSSBT DFHXSTRI EYU0VBPC
    

Fix information

  • Fixed component name

    CICS TS Z/OS V5

  • Fixed component ID

    5655Y0400

Applicable component levels

  • R000 PSY UI44253

       UP17/02/10 P F702 ¢

  • R00M PSY UI44254

       UP17/02/10 P F702 ¢

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.3","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.3","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
02 March 2017